FILE: C:\Program Files\SentinelOne\Sentinel Agent 24.2.3.471\SentinelELAM.inf
--
[Version]
Signature = "$Windows NT$"
Class = "AntiVirus"
ClassGuid = {b1d1a169-c54f-4379-81db-bee7d88d7454}
Provider = %ManufacturerName%
DriverVer = 05/01/2024,8.33.34.734
DriverPackageType = KernelService
PnpLockDown = 1
CatalogFile = SentinelELAM.cat
[DestinationDirs]
DefaultDestDir = 12 ; DIRID_DRIVERS (%windir%\system32\drivers)
SentinelELAM.DriverFilesForCopy = 12,\SentinelOne\ELAM
SentinelELAM.DriverFilesForDel = 12,\SentinelOne\ELAM
[DefaultInstall.NTamd64]
OptionDesc = %ServiceDescription%
CopyFiles = SentinelELAM.DriverFilesForCopy
[DefaultInstall.NTamd64.Services]
AddService = %ServiceName%,,SentinelELAM.Service
[DefaultUninstall.NTamd64]
LegacyUninstall = 1
DelFiles = SentinelELAM.DriverFilesForDel
[DefaultUninstall.NTamd64.Services]
DelService = %ServiceName%,0x200 ; SPSVCINST_STOPSERVICE
[SentinelELAM.Service]
DisplayName = %ServiceName%
Description = %ServiceDescription%
ServiceBinary = %12%\SentinelOne\ELAM\%DriverName%.sys
ServiceType = 1 ; SERVICE_KERNEL_DRIVER
StartType = 0 ; SERVICE_BOOT_START
ErrorControl = 3 ; SERVICE_ERROR_CRITICAL
LoadOrderGroup = "Early-Launch"
[SentinelELAM.DriverFilesForCopy]
%DriverName%.sys
[SentinelELAM.DriverFilesForDel]
%DriverName%.sys
[SourceDisksFiles]
SentinelELAM.sys = 1,,
[SourceDisksNames]
1 = %DiskId1%,,,
[SignatureAttributes]
SentinelELAM.sys = SignatureAttributes.Elam
[SignatureAttributes.Elam]
Elam=true
[Strings]
ManufacturerName = "SentinelOne, Inc."
ServiceDescription = "Sentinel ELAM Driver"
ServiceName = "SentinelELAM"
DriverName = "SentinelELAM"
DiskId1 = "Sentinel ELAM Driver Installation Disk"
--